Access Control Flaw in TÜBİTAK BİLGEM Software Technologies Research Institute Product
CVE-2026-121267

7.8HIGH

Key Information:

Vendor

Tübi̇tak Bi̇lgem Software Technologies Research Institute

Status
Eta-remote
Vendor
CVE Published:
10 November 2026

What is CVE-2026-121267?

The eta-remote product from TÜBİTAK BİLGEM Software Technologies Research Institute has a vulnerability that stems from incorrect default permissions, allowing unauthorized access to functionalities not properly protected by Access Control Lists (ACLs). This issue can lead to potential unauthorized actions by users who should not have access, making it critical for users to upgrade their systems to maintain security.

Affected Version(s)

eta-remote 0.0.2 < 0.0.3

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ahmed Emin AYGOREN
.